8:58
An agent can now create, update and delete the secrets your HubSpot app depends on, like API keys and tokens, without ever reading a value back. Secrets are write only.
Ryan walked through why that matters. When a deployment fails for a missing secret, the agent can read the error, create the secret and retry. The risk is the other direction: if your app can read secrets and you're not careful, in his words, "all the secrets that go there become readable via an agent."
My read: they're closing the read door here, which is why I think the update is important. And Ryan's point on naming stuck with me: "key one is not going to be very helpful to an agent."
The next step