Claude Managed Agents stores credentials in an isolated vault and replaces them with placeholders until an egress proxy injects them