And how does the OS/app prove who it is? How do you get the secret zero inside? You can orchestrate something with your config management tool, but there's no n

And how does the OS/app prove who it is? How do you get the secret zero inside? You can orchestrate something with your config management tool, but there's no nice way of doing it without having to also handle rotation afterwards. It works marvelously in AWS, GCP, Azure. It allows for an extremely secure and low maintenance solution to that existential issue. It's a perfect thing for the platform to handle for you.