An external attacker or malicious insider who is able to hijack these types of user credentials could shut down cloud environments.