pub fn token_from(account: &str) -> Result<(String, Origin), SecretError>Expand description
Fetch it, and say where it came from.
The environment wins over the keychain so that a CI run, which has no keychain at all, does not have to pretend otherwise.