pub fn resolve_key_file(target: &Utf8Path) -> Result<Option<KeyFile>, RkError>Expand description
The validated private key file, where the operator named one.
Every refusal happens before the step spawns, so a wrong path, a wrong mode, or a wrong encoding never reaches the forge. What the encoding wraps is the forge’s judgment: this refuses a file that is not a PEM private key, not a key the forge would reject.
§Errors
Refuses a stale contents variable, and a named file that is missing, unreadable, not a regular file, readable beyond its owner, empty, oversized, inside the target, or not a PEM private key.