A network administrator is deploying twelve new Cisco ISE 3.x virtual appliances across remote data centers. To avoid manually running the setup wizard on each node, they want to use ISE Zero-Touch Provisioning (ZTP) so the nodes automatically receive their initial network and node configuration on first boot. Which mechanism does ISE ZTP rely on to deliver the initial configuration securely to a freshly booted node?