forwardAgent : bool
identityFile : ?absolute path — default IdentityFile applied to `*` (e.g
initrdPort : u16 = 8022 — SSH port the initrd unlock service listens on, for `-unlock` entries
user : str = "root" — account used for the generated fleet entries — who *this* client logs in as