If our vendor required a password auth, I want three sandboxes between it and anything production. Its an explosion waiting to happen.