pub const DEFAULT_TAILNET: &str = "-";
What the API accepts to mean “the tailnet this credential belongs to”.