It's been common knowledge for a long time. Just not in the population of people who set up agents and hand them personal credentials.