From what I understand, the recommended way to auth the railway CLI is to use railway login and with that I can limit access to a few projects.

This is good, but I don't want there to be any way for my spending limits to be modified by the CLI by a coding agent. One of the things I like about Railway is the peace of mind of hard spending limits. But, if the CLI gives coding agents access to modify these, it discourages me from using it.

My workaround is using RAILWAY_TOKEN but this doesn't work well when I have multiple projects on my dev box.