Document OpenBao Browser CLI limits

tests/test_credential_change.py

@@ -144,6 +144,11 @@ class CredentialChangeTests(unittest.TestCase):
             "bao write auth/netkingdom/role/whynot-design-workload-kv-read",
             rendered,
         )
+        self.assertIn("# Do not paste this shell block into the OpenBao Browser CLI.", rendered)
+        self.assertIn(
+            "# Web UI API Explorer path for the role JSON body: /v1/auth/netkingdom/role/whynot-design-workload-kv-read",
+            rendered,
+        )
         self.assertIn('role_payload_file="$(mktemp)"', rendered)
         self.assertIn('"bound_claims": {', rendered)
         self.assertIn(