Swarm worker keys stay inside their own sandboxes

A key made by another key with reach agent now gets 403 forbidden on the account's own settings, whatever its person's role: closing the account, webhooks, telemetry exports, the audit log, credit and billing, secrets, domains and networks. It still runs sandboxes, reads its own usage and makes its own keys; an account-wide one keeps everything. See Run a swarm.