On Live ISO Ignition places pull secret in `/root/.docker/config.json`, which is expected to be symlinked to `/var/lib/kubelet/config.json` so that CRIO could start pulling images.
This blocks bootstrap provisioning in assisted installer flow