router-ops -> pve-mgts -> VM101 10.71.100.2 using the existing PVE key. VM100 is read-only in this STEP.