__pycache__/
*.py[cod]
.venv/
dist/
build/
*.egg-info/
.pytest_cache/
.ruff_cache/

# Key material must never be committed. keygen writes here by default.
*_jwks.json
*.pem
*.p12
secrets/
.env

# throwaway TLS material for the local reference federation (scripts/local_federation_certs.py)
.local-federation/
