Read one field, not the whole item.
The owner-operated CLI reads one exact text field with one command. Machine workloads use the one-use acquisition path instead of receiving the owner's decryption authority.
Reading from Skarbiec#
Pass the item id and one exact field name. get --field writes only that field's plaintext value to stdout; it does not return the rest of the item.
skarbiec get github --field usernameOwner and workload paths stay separate#
This command is for an owner whose configured GPG identity may decrypt the item. A machine workload registers acquire:item#field, proves its workload identity, and consumes a short-lived one-use bearer as shown in Quick start.