First trust only: compare this with the eight-digit code shown by OmniBox. After approval, this local connector renews its own short grants until you revoke it.
Company plugin access alone is not OmniBox authority. A fresh sudo approval trusts this dedicated local OmniBox tunnel identity; individual grants remain eight hours and renew automatically until panic revoke.