Which of these is not a benefit of dynamic secrets?

Dynamic secrets *do* support systems lacking native credential expiration by having Vault manage the lifecycle and revoke credentials after a set TTL.

Dynamic secrets *do* minimize the damage of credential leaks because they are short-lived and automatically revoked, limiting the time an attacker can use a compromised credential.

A core security benefit of dynamic secrets is that Vault creates and manages them without necessarily exposing the plaintext password to administrators or even storing it long-term within Vault itself, for instance, when generating database credentials. This 'zero knowledge' principle enhances security by reducing potential insider threats and the risk of credential exposure to administrators.

Dynamic secrets *do* replace cumbersome manual password rotation by automating the generation, distribution, and revocation of credentials, streamlining security operations.