pub fn device_keys_path() -> Result<PathBuf, PathError>
Where the keys live: beside the endpoint identity.
Whatever resolving the data root returns.