The control plane, the HTTPS proxy, and the SSH front end ship as a single Rust program.
Every VM answers at name.bento.foid.space over HTTPS, with the certificate handled for you.
ssh bento.foid.space new <name> creates a machine; every action here has a command-line twin.