Sites, devices and internet exits for the whole cluster. Each site's gateway reads this and configures itself — joining this directory is joining the mesh.
A site marked offers an exit is only saying it is willing to carry traffic. Granting it to a user is a separate, explicit decision.