Use bound parameters on STS clients in credentials classes