Certificates get lifecycle governance. API tokens and service credentials often don't. Here's why trust lifecycle management must cover both.