A compute workload uses a human administrator's signing key to read secrets. Which replacement is preferable?

1. A resource name containing the key fingerprint as the only control.
2. A copy of the same key in every public image.
3. A public secret endpoint without access checks.
4. An instance principal, matching dynamic group, and narrowly scoped secret permissions.