Fine for single-purpose app deployments, but on a grander scale you&#x27;ve just pushed all the security problems back to the APIs and interfaces of your cloud provider and&#x2F;or virtualization engine. Now an AWS access token constitutes a root password for everything (for example).