This works alright.

In fact, my pet peeve is why can't 1Password build in the ability to "remotely" approve something via the 1Password app? I'd get a push message, hit allow, and it does the negotiation in an e2e encrypted way.

Then I could approve something my agent needs when I'm not at the computer. Service Accounts are a crappy solution to be honest.