Owner controls for private work, exact attribution, and auditable manual reward decisions.
The key stays in memory only and is cleared on lock or reload.