# Public keys only

Store public keys here (e.g., `*.pub`).

- Name keys to match the role/device: `<role>-<scope>-<id>`.
- Never commit private keys.