pub fn health_key(dir: &Path) -> Result<SigningKey>
The core’s report key: created on first use, readable by root only. The public half is written beside it for whoever checks the reports.