If a single technician loses a credential vault, every client environment that the vault touched is now in scope for an incident response. That is