“A recommended practice for managing secrets for AI agents is to use a dedicated, separate vault within a password manager like 1Password and grant the agent access to that specific vault.”