That doesn't happen because you don't let them have the credential vault keys. In fact no humans get them; just the build and deployment pipeline.