[chef] validation.pem distribution question

[Kirill Timofeev < >]

Folks,

please share how do you distribute validation.pem. It looks this is 
sensitive piece of data since anybody having it can register new client. 
So it seems it is bad idea to make it available, for example, via http. 
But how it can be provided for new client installation?

Thanks,
Kirill.