Ok what's strange is that using the CLI I can create a new folder with a fresh Pulumi.yaml then select the stack and do

config refresh

- but this doesn't work when I try to do the same thing with the automation API. I get this error:

error: could not decrypt configuration value: cipher: message authentication failed

Is there a way to log each CLI command that the automation API is invoking?