Post #1686946

@schenklklopfer …and then you have to do some extra management if someone takes it over, including revoking all tokens the runner itself holds but CI workflows shouldn’t access. It’s not that simple.