Short-lived
Scoped credentials, per task.
DevOps + Vault
In private preview. A bot pulls short-lived, scoped credentials from your HashiCorp Vault for each task, does the work and wipes the session.
It acts on your own infrastructure, so there is no demo.
Real work
It acts on your own infrastructure.
Wiped after
The session is gone when the job ends.