Close OpenBao OIDC admin bootstrap path

sso-mfa/k8s/keycape/patch-openbao-client.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Patch the live KeyCape config Secret with the code-defined OpenBao CLI client.
+# Patch the live KeyCape config Secret with non-secret code-defined settings:
+# the OpenBao CLI client and LLDAP OU lookup paths.
 # This does not require decrypted bootstrap secrets and does not print existing
 # Secret values.
 
@@ -14,4 +15,4 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
   | python3 "$SCRIPT_DIR/openbao-client-config.py" patch \
   | "$KUBECTL" patch secret "$SECRET" -n "$NAMESPACE" --type merge --patch-file /dev/stdin
 
-echo "Patched $NAMESPACE/$SECRET with the openbao-admin client definition."
+echo "Patched $NAMESPACE/$SECRET with the openbao-admin client and LLDAP OU lookup settings."