Permissions
Every action in kixctl is a discrete, gated permission. The full catalog, grouped, with the tier each belongs to.
Configuration
The environment the control plane reads — database, cache and queue, Incus transport, and deploy settings. On the appliance these come from the system config, not a file.