Keep the credentials discovery runs on

the security team, before any source is connected Asset and Configuration Management