main
tls artifacts: list ondisk locations alongside secret/configmaps
Adjust types to accomodate for ondisk-only certs/cabundles