Right. Hence the secret cinder uses. Not sure where the confusion is, semantics perhaps? It's the UUID that coincides like virsh, as you said. Maybe you're confusing this with client.admin?