In order to be able to support things like password rotation, the ConnectionFactory must request credentials each time a connection is about to be created.