> at some point credentials will pass to your llm of the week.

How?

I happen to know a solution where credentials wouldn't get to the agent. It's structurally impossible