Any device that outputs clear-text components is either switched off when idle or demands re-authentication every time generation is started; where a logically partitioned device is also being used for other tasks at the same time, key generation is disabled while that other activity runs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.