What happens when the only tool that can fix your credentials needs those same credentials to run.