kbsecret-new-session: Make --label required
kbsecret-new-session: Make --label required

The `--root` option should probably be mandatory as well,
but *only* when `--team` is not passed.

woodruffw/kbsecret,kbsecret/kbsecret,kbsecret/kbsecret