# Where ./glue-bao-tls.nix keeps the store's own CA and the leaves it signs,
# on the host that runs the store. Shared so a glue that points a principal at
# its minted leaf names the directory the minting unit writes to, not a copy
# of it.
"/var/lib/swarm-bao-pki"