Sandboxes with egress secrets start under heavy load

Creating a sandbox that names its egress secrets (secrets) checks its list again rather than failing at once with secrets_unconfirmed when the service is busy, and one account sending far more requests than its limit is slowed alone while other accounts' calls go through. See Keys and secrets.