One credential is bound to one truck
A gateway is registered against a vehicle. Its credential is shown once, stored only as a hash and can be rotated without sharing another truck’s identity.
Why this is different
A fleet-wide token makes one leaked device a fleet-wide problem. Per-truck credentials keep the blast radius and audit record specific.

