Short-term one-time-use credentials provided during PAM. They only work for a short amount of time before being sent to the Password Vault