Thanks for explaining! this makes a ton of sense -- the workspace scoped creds I guess would be the only place where they'd be stored (temporarily).