pub fn enroll(
store: &LocalFsStore,
flags: &OpFlags,
payload: Option<UpdatesEnrollPayload>,
) -> Result<OpOutcome, OpError>Expand description
op updates enroll — enroll with the Cert-CA and persist the signed client
certificate + key + issuing CA (and the CA URL) into the env secrets backend.
Idempotent by overwrite: re-running mints a fresh identity (manual rotation).