Provider boundary for upstream credentials.
Readonly
Produce credentials for one scheme.
Whether credentials are configured for the scheme.
Forget cached credentials after the upstream rejected them.
Provider boundary for upstream credentials.