homelab-journey Secret Management Part 5: Replacing OpenBao's kv-admin Token with a Login kv-admin had absorbed root's privileges and carried a deadline nobody tracked. A userpass login removed both — and the escalation made it possible.