VM130 router-ops -> ssh pve-mgts -> nested key SSH root@10.71.100.2. Direct VM130 root SSH to VM101 is not used. VM101 scripts are standalone POSIX sh.