pub fn resolve_backend(explicit: Option<&str>) -> Result<Option<BackendChoice>>Expand description
Parse --credentials-backend, or fall back to default_store_root.
The one parser for that flag: act secret set/list/rm and the runtime’s
the credential host crate::ComponentRuntime::load builds both come
through here, so a store named on the
write is the store read on the run. There is no inferred backend — an
unrecognised value is an error, never a silent fall back to plaintext
(design D13/§7.4).
Ok(None) means only “no store location exists on this platform, and none
was named”: the runtime treats that as no credential host, while act secret turns it into an error naming the flag. Neither decision belongs
here.