 on secure and efficient secret storage, not authentication.</li>
<li>Access control and identity management are better delegated to established
identity standards like OIDC.</li>
<li>This approach ensures compatibility with enterprise authentication policies
and simplifies integration with existing IAM solutions.</li>
</ul>
<h2 id="consequences">Consequences</h2>
<ul>
<li><strong>Security</strong>: The predefined SPIFFE-based roles provide a minimal attack
surface for core administrative functions, while O