pub fn resolve_secrets_site(hostname: &str) -> Result<String, String>Expand description
Site prefix holding hostname’s secrets.
DEFAULT_SECRETS_SITE is per-invocation, so it cannot describe a consumer
whose hosts span several sites. When it does not hold the host, discover the
site from the repository layout instead. Ambiguity is refused rather than
guessed: picking the wrong site writes a second identity for a host that
already has one.