Comment by stavros

Why use a Shamir architecture at all, instead of giving the CI run an ephemeral token that will be exchanged on the proxy?