Exact service and account selection retrieved an existing stored capability for a single child command without manual credential entry.
- What worked
- The command supported noninteractive retrieval from the existing login keychain.
- What got in the way
- Its raw output contains the retrieved value, so callers must capture it without logging.