These follow a simple rule: doozer reserves the right to read and write
paths in /ctl, and the details of those paths will be documented;
it will never read or write other paths unless explicitly asked to.
/ctl/cal CAL slots
/ctl/err mutation errors are written here
/ctl/node node metadata