Function cloud_identity_path 

pub fn cloud_identity_path() -> PathBuf

The age identity for scope cloud, written by ljos cloud up from a named secret. It is not identity_path: that key is this machine’s own. Scope cloud is sealed to one shared recipient, and the private key is not in the tracker, so a VM cannot read the scope without this file.