E0027

This operation requires an authenticated person session.

API keys and browser app calls cannot perform session-only operations, including provisioning secrets. Adding management scopes to a key does not lift this restriction.

Sign in as the person authorized to perform the operation. For personal CLI operations, browser-based crab login opens a session; crab login --device issues an agent key. For a service's missing secrets, deploy without --yes and have the owner complete the deploy page; do not send credential values to an agent.