The credential boundary: how should an AI agent use a login without holding it?

· Dev.to