Lately, there's been a lot of chatter in the security community about non-human identities—API tokens, service accounts, bots, certificates, you name it.