Two Proton Pass CLI PAT Gotchas: --pat Argv Exposure and Rotation Limits
pass-cli login --pat exposes the token in argv and shell history, PAT-authenticated sessions cannot manage PATs, and a rotated token that never reaches the Keychain silently breaks auto-renewal.
Development#proton-pass#cli#security