Death to long-lived static credentials

Author here. Feedback welcome, and would love to hear ideas to bring about the end of static credentials.