Credential custody is the wrong abstraction for browser automation

The most dangerous password in an automation system is the one it successfully uses. Once a workflow can log in, engineers tend to optimize around that success: save the credential, retry with it, sha