Switching accounts left the old page mounted. A late API-key response could show the previous account’s secret on the next one. The outlet is now keyed to the principal, so the old page unmounts. Local Playwright passed.