pub const KEPT_DIR: &str = "/var/lib/isoloom/secrets";
Where a machine keeps the secrets delivered to it: root-only, on disk.