Securely authenticating non-LLM CLIs requests

[IchordeDionysos]

I'm wondering if and how OpenShell could be supporting / protecting the following use-case.

LLMs are really good at writing code, debugging issues by writing shell commands.

Some of those need to authenticate with third-party services, such as your Cloud (gcloud SDK) or SaaS environment (Langfuse CLI).

Is there a way to isolate those Langfuse or Google Cloud credentials to only those CLIs?
So that no other tool/command can access the Langfuse API key or access your Google Cloud credentials?