Secrets or Identity, which one should an Agent have?

Interactive diagrams. Zoom and pan to read the labels that are too small in the article.

• One File for Everyone, or One Identity per AgentOpening section, after the second paragraph
• Keyspout data flow: entered, sealed, stored, fetched, opened, usedOpening section, before "A secret and an identity answer different questions"
• A secret is a value that proves nothing; a claim names the agent"A secret and an identity answer different questions"
• The enrolment workflow: two keypairs, one fingerprint, one separate channel"Set up an identity for the agent you want to use"
• Choose access for the task: pick, copy, bound by a lease, record"Choose access for the task"
• Keep the service stateless and verify the storage"Keep the service stateless and verify the storage"