Coding agent permission rules can preserve secrets in project files Apiiro found credentials in public agent settings and repository history. Review saved approvals, rotate exposed credentials, and check what travels with a project.