Credentials are scoped by environment and owner.
Create one when an integration is ready to authenticate.