Two new Claude Managed Agents features in public beta: scheduled deployments run agents on a cron without any scheduler to build; credential vaults let CLIs authenticate without the agent ever seeing the actual key, which is swapped in at the network boundary for approved domains only.