Customers don't want to give out admin passwords, they want to hand out secrets that are scoped to only XDCR.