For one of our customers, we created a custom credential provider which receives a decryption key and the filename of an encrypted file which container the username and password
