In reply to jaap karman.

You know what Jaap? I actually agree with you on all of these points. (I know, it's weird for me too...)

I agree that production jobs should be run by a service account. I should establish that for some of my work, but then it turns into an IT project and as you know, it adds another layer of management. For important jobs that's justified.

The PW-protected data set? That does significantly obscure the credentials and adds another level of indirection, but in the end anyone with the data set password could replay the access to these secrets. It makes the process more difficult to untangle for those not in the know, but it doesn't add true security.