V

Named secrets, least privilege

Access stays scoped and revocable, and secrets are referenced by name rather than held.

You would not hand a new hire the root credential on day one, and an agent should have even less standing power. Access that is narrow and revocable is what lets you say yes to delegation at all.