[artursapek]

It's not even about edge cases - it's just good security practice to isolate credentials as much as possible and limit their scope.