Initially the authentication with the registry was performed with a TLS
client certificate installed on the controller.

The registry is now configured to use token-based authentication (to
give access to the users), but unfortunately it cannot be configured to
support multiple auth methods. So we have to provide a token for the
controller.

This is a 'God' token, it gives total access (pull and push) on all
images.