I see, so a workload spins up and wants to learn something about itself and uses identity verification to gain access to it? My use case was an untrusted node

I see, so a workload spins up and wants to learn something about itself and uses identity verification to gain access to it? My use case was an untrusted node getting a centrally issued key to join a p2p VPN