The process watches the three buckets on its own read-only credential; the manifest declares reads only, no state and no emits; the zsh item carries the alias as mesh-cli's does.
The command holds no credential: it asks the local socket, which answers only the rows ask.
jschoubben