The credential that determines your exposure is increasingly becoming the one your vendor issued on your behalf to a system that trusts it unconditionally.