Client profiles
New-PC deployment per client (provisioning only). Boot the install USB for zero-touch (wipes + reinstalls Windows), or open /deploy on a running PC and enter the client code shown below.
Settings
Wasabi object storage for captured profiles.
Scope this Wasabi key to the deployment bucket only — not the whole account. It is handed to a machine only after its deploy code checks out, written to a temp rclone config, then wiped.
Enrollment secret
—