.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.TH exec 1 "exec "
.SH NAME
exec \- Run a command with strict agent\-safe defaults (clears the inherited environment, strips MURK_KEY, requires \-\-only)
.SH SYNOPSIS
\fBmurk agent exec\fR <\fB\-\-only\fR> [\fB\-\-vault\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fICOMMAND\fR>
.SH DESCRIPTION
Run a command with strict agent\-safe defaults (clears the inherited environment, strips MURK_KEY, requires \-\-only)
.SH OPTIONS
.TP
\fB\-\-only\fR \fI<ONLY>\fR
Inject these specific keys (required — agent mode fails closed)
.TP
\fB\-\-vault\fR \fI<VAULT>\fR [default: .murk]
Vault filename
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help
.TP
<\fICOMMAND\fR>
Command and arguments to execute