I happen to know a solution where credentials wouldn't get to the agent. It's structurally impossible