An AI chat is not a vault: the assistant gets a pass of its own. A read-only token instead of a password in the chat, revoked when the work is done.