Comment by UltraSane

creds that can't be exported can't be stolen. It is a tricky tradeoff.