Bits that run on your key, not the gateway's: you paste it, it signs in your browser, and it never reaches this gateway.
A terminal into a running CES program. Give it the server, the instance id
(the pid, from cesh compute ps), and your key, then type
at it like a shell — e.g. the /s/dice game.