key exchange doc

[Paul Heinlein]

I'm having trouble finding documentation concerning how to bootstrap a
cfengine 2.x key infrastructure. To date, we've run cfengine/cfagent
against nfs-exported configs, but we'd like to move to a cfservd/cfrun 
architecture.

Is there an online doc that describes how to do the initial exchange 
of public keys between hosts?

Thanks (and my apologies if I'm missing something really obvious),

-- Paul Heinlein <heinlein@cse.ogi.edu>