To encrypt the data send between machines inside the openSUSE heroes network, we maintain an own CA (Certification Authority). As we love automation, the main part of this job is done by step-ca -> https://smallstep.com/docs/step-ca