An agent executor only needs to read one secret and invoke one internal API. What is the best runtime permission design?

1. Store a permanent shared administrator token in every user session.
2. Grant administrator access and rely on the tool description to restrict usage.
3. Use a temporary workload role scoped to the required secret, key access, and API operation.
4. Use account root access keys because the executor is server-side.