Thread-safe rotatable credential provider whose value is redacted in logs.
Removes the credential so subsequent access fails with AuthError.
Clears the credential when the provider is closed.
Returns the current credential or throws AuthError when unavailable.
Replaces the current credential after validation.
Returns a representation that never reveals the credential.