anchor.diff:      signed statement about the CloudAPI zone's IP address and keys, including
       the GZ certificate.
    .. Binder receives and validates the registration
  - ... First, binder retrieves the list of valid headnodes from the gossip service
  + ... First, binder retrieves the list of valid Trusted CNs from the gossip service
        on its host CN (via the soft token socket?)
    ... Then, it compares the signature on the certificate given by the registrant
  -     to this list and finds it was signed by a valid headnode
  +     to this list and finds it was signed by a valid Trusted CN
    ... The certificate presented includes metadata about the zone, including any
        values of `sdc_role` or `manta_role` tags. Binder validates that such
        values should be allowed to register under the given DNS name.
  
positive.code: 
  ### CloudAPI
  
   . The (headnode) CN hosting the CloudAPI instance boots up (see <<cn-boot>>
     for more details)
   .. It starts up the zone soft token manager daemon, which will LoFS mount
      sockets into all zones (see <<soft-token>>). The daemon does not unlock the
  
negative.code:    newer timestamp on the very first statement.
  
  In this way, in an emergency situation, the chain can be restarted by using the
  offine master key to sign a new statement about the Trusted CNs for the
  installation.
  
  This design allows Trusted CNs to be added and removed from the installation at
  a later date without requiring that the root of the chain of trust be available
  in online storage for signing.
  
  Once the gossip process has stabilized, all CNs in the system are aware of the
  identities and keys of nodes that are authorized to act as Trusted CNs (hosting
  core Triton services). This means that zone certificates presented by zones on
  these CNs can be validated, authenticating headnode services to each other.
  
  It is important to note that changes to the set of Trusted CNs are expected to be
  infrequent, so it is not important to use a distributed system here that offers
  fast convergence. The simplicity of implementation of a gossip design is also
  an advantage.
  