Holy mother of whatever this is, everyone got the same idea again and there’s a bunch of implementations people are desperate to promote in the comments.

You’re just trading one key for another, whatever abstraction you chose to trust, at some point credentials will pass to your llm of the week.

> at some point credentials will pass to your llm of the week.

How?

I happen to know a solution where credentials wouldn't get to the agent. It's structurally impossible