Short-lived credentials reduce exposure – but they aren’t secure by default. Here’s what ephemeral identity gets right, and ...