How do you change a secret that half of your production applications use right now?
How do you know which secrets and credentials of your production services were used, and by whom/what?