This is not a provider credential. Provider flags must remain disabled until a
root-controlled host secret file is mounted over the corresponding container path.
