secretless access
In short: Secretless access means an agent reaches a resource without holding any stored secret. The agent proves who it is through its environment or workload identity, and a broker supplies a short-lived credential for the call. Nothing long-lived sits with the agent to leak.
Where does it show up in practice?
Aembit describes secretless exchange so agents never hold standing credentials.