pub fn overridden() -> bool
Whether the environment is standing in for the keychain.
One token for every account is the right behaviour in CI and wrong everywhere else, so the commands that show identity say when it applies.