X_SECRETS_KEY_ACL_FAILED
Means
key file ACL not owner-only
Typical cause
on Windows, icacls refused to cut the new key file ACL to the current account, so no key was written
Fix
where.exe icacls — then whoami; or keep no key file and set ULTIMATE_SECRETS_KEY