> The first feature is dynamic secrets: this generates an ephemeral, leased set of credentials that are unique per client. Yes, thank you. This is one of thos

> The first feature is dynamic secrets: this generates an ephemeral, leased set of credentials that are unique per client. Yes, thank you. This is one of those features that once you've lived with it, you can't imagine going back. Essentially, every secret gets an automatic expiration date in the near future. This has several effects: 1. It teaches people to never hard-code secrets anywhere, because they always expire. So people will follow fairly strict credential-management rules out of sheer laziness. 2. It guarantees that you don't have stale secrets lying around in random corners of your company. So even if somebody does record a secret somewhere they shouldn't, the window of attack may only be a few hours.