Documentation. Note how to reach an OF AM, that the user URN is in the subject alt name not subject CN, that PG key/cert can be in 1 file, the search order omni uses to find omni_config, etc