Glossary
Local Credential Store
A local credential store is wherever a developer's own tools — a CLI, an IDE plugin, a local configuration file — cache authentication tokens or keys on their machine between uses, so the developer isn't re-authenticating for every single command. This is a real convenience, and it also means credentials with real access now live on an endpoint the organization typically has far less visibility into and control over than its own servers.
A developer's laptop is a much softer target than a hardened production server in most organizations, which makes credentials cached there a disproportionately attractive target relative to how little attention they usually receive. Scoping what a locally cached credential can actually do, and keeping its lifetime short, limits what a compromised laptop actually hands over.