IIRC this is part of why modern credential management stores provide one-time-use tokens for certain services. You can provide the same with quick hacks, it just takes more hacking.