Hello,

I just deployed Proxmox Datacenter Manager (latest alpha/beta — running it as a
VM on a dedicated node) and I'm enrolling my existing PVE 8.x clusters into it.

In the "Add Remote" workflow PDM asks for credentials to connect to the cluster.
I see I can either:

- Use root@pam with a password,
- Or pre-create an API token with specific privileges and paste it.

Documentation is still a bit thin on the recommended approach. What are people
doing in real deployments? I'd prefer not to scatter root@pam credentials around,
but I want to make sure the token has enough privileges for PDM to actually do
its job (incl. cross-cluster migration down the road).