One possible reason is they might want each microservice to be a separate security domain. So that if one microservice is compromised, attackers cannot use cred

One possible reason is they might want each microservice to be a separate security domain. So that if one microservice is compromised, attackers cannot use credentials stolen from that microservice to control other microservices.