I don't know, strange things happen. The other day I had to rotate a bunch of credentials because a coop cloned a private repo, made it public, and checked in a .env file with production database credentials... 5 years ago. And they still worked. No idea how that wasn't exploited, honestly.
(I wasn't around for this, I just found it)