Function credential_variable_for 

pub fn credential_variable_for(provider: Provider) -> &'static str

The variable the account’s real credential lives in, which is the variable its dummy has to travel in too. The one home for the rule: the config load maps the flat token onto it, the stamp puts the dummy in it, and the forward leg reads the real credential back out of it.