Covert Assistance: helpful agents can share protected credentials while evading oversight, even without adversarial incentives.