You shouldn't need to add anything additional for the dispatch wrt the preshared key, but even running at all should require a

--grpc-preshared-key $YOUR_SECRET

. All CLI flags can also be done with environment variables e.g.

SPICEDB_GRPC_PRESHARED_KEY

if you want to mount the value from a secret