Client profiles
Naming, local admin, domain join, and software per client.
Settings
Wasabi object storage for captured profiles.
Scope this Wasabi key to the deployment bucket only — not the whole account. It is handed to a machine only after its deploy code checks out, written to a temp rclone config, then wiped.
Enrollment secret
—