ClusterID         string            `json:"clusterId"`
	TrustDomain       string            `json:"trustDomain,omitempty"`
	Locality          Locality          `json:"locality,omitempty"`
	Node              string            `json:"node"`
	Network           string            `json:"network,omitempty"`
	Status            string            `json:"status"`
	ApplicationTunnel ApplicationTunnel `json:"applicationTunnel,omitempty"`
}

// in preference order.
func TLSCurveIDs() []tls.CurveID {
	var curves []tls.CurveID
	if !Enabled {
		curves = append(curves, tls.X25519) // Only enable X25519 in non-FIPS mode
	}
	curves = append(curves, tls.CurveP256)
	if go19 {
		// With go1.19 enable P384, P521 newer constant time implementations.
		curves = append(curves, tls.CurveP384, tls.CurveP521)
	}
	return curves