sm re-auth pending (#925); /tmp/cr.env is the documented interim. Redmine: https://projects.knownelement.com/issues/925
Sweep checkout path moved to ~/projects/KNEL/KNELPFVCluster; creds now accepted from env (vault/sm-ready) since ~/.creds textfiles retired. Redmine: https://projects.knownelement.com/issues/796#note-134
Cloudron-native enforcement (ipset cloudron_blocklist via panel setting). https://projects.knownelement.com/issues/796