Keys are written to Windows Credential Manager (or the OS keychain). The agent pauses for your approval before payments, submissions, deletions, sends and permission changes — unless Auto mode (next to STOP, or type /auto) is on: then it only stops for payments and purchases, app installs and security/accessibility settings.