Agreed. But the problem is— I've never once given serverless my credentials... The specific instance in this case is that there is portion of serverless (calle

Agreed. But the problem is— I've never once given serverless my credentials... The specific instance in this case is that there is portion of serverless (called serverless-components) where it appears to boost them from your `~/.aws/credentials` file, which seems very inappropriate.