This walkthrough needs JavaScript. In short: a secrets distribution service, as this practice designs it, makes two things true together. A workload proves what it is with something the infrastructure attests and it neither stores nor was given, and it receives a credential that expires on its own. Short leases contain a dead holder, scope revocation contains a live one, a site outage is survived for at most sixty minutes with no switch to extend, and every read is recorded before the secret is returned. Told as a hotel: the guest has no key, the desk checks the booking, and the room card stops working at checkout.