- add build job that runs `make plan` - enable provider caching - enable creating client.crt/client.key