The vault
Find a gated agent, click Connect, authorize once. Roam holds the encrypted token and calls it as you — forever. Mint a key first.