Great overview. The part that gets hard at scale is doing these one connection at a time - I built GatewayLens, a free, open-source console for gateway admins, for exactly that: bulk credentials and access, handing over a leaver's roles, offline alerts, and cleanup before a cluster reaches 1,000 data sources. https://github.com/lukas-novacek/GatewayLens