I don't know, this is why I'm asking. I don't know if the issue even really exists or if there are workarounds. But OAuth tokens for instance are bound to serv

I don't know, this is why I'm asking. I don't know if the issue even really exists or if there are workarounds. But OAuth tokens for instance are bound to services, aren't they? If I'm correct, that would make that sort of centralized auth resilient to apps leaking credentials.