Some agent tools still need external credentials. Which secret strategy is appropriate?

1. Use one permanently unrestricted administrator credential everywhere
2. Put all secrets in every agent's system prompt
3. Protected retrieval from Key Vault or an appropriate secret store, with scoped access and rotation
4. Store secrets in public source tags