Decrypt the KamoPBX credential; test the refusal path

Shipped

August 27, 2026 at 8:53 AM UTC

Author

Kamo

Commit

60941b3

The master credential is stored as ciphertext by the platform settings UI, so it must be decrypted before use — handing ciphertext to the API as a password would present as a bad credential and send whoever debugs it the wrong way. Two new tests cover the refusal path that previously surfaced a raw Kubernetes DNS error to an org admin: no master account id, and no administrator credential. Both assert the message names the settings page. 248 tests pass.