HOWTO for setting up secure/private multi-tenant Incus/IncusOS

I can’t figure out how to enable OVN:

$ incus network create ovntest --type=ovn network=incusbr0
Error: Failed loading network: IncusOS service "ovn" isn't currently enabled

$ incus admin os service show ovn
WARNING: The IncusOS API and configuration is subject to change

config:
  database: ""
  enabled: false
  tunnel_address: ""
  tunnel_protocol: ""
state: {}

There is documentation on how to set up OVS and OVN on Incus, but all I can find for IncusOS is the OVN reference page which is not sufficient to know how to enable OVN. It would really help if there were a tutorial. I’m willing to help write one but first I have to understand how to do it.

The only other page I’ve found is IncusOS OVN Issues. It appears that ovn-central needs to be running but where? How is it done on IncusOS? (A later post in the same topic says that Operations Center creates a meshbr0 with an internal project but meshbr0 appears to be needed when OVN is running on a cluster. Right now I am running a single node so that seems overkill even if I knew how to enable Operations Center.)

It looks like I am stuck without a little explicit hand holding.