BYO credentials: why your control plane should never ask for master keys

You sign up for a new tool to see your infrastructure in one place. First onboarding step: "Connect your cloud". And the form asks for the tenancy's admin API key. The master one. The one that can cre