Shared read-only account vs per-user server entries for Maven repository credentials
Our team authenticates to a private Nexus repository through <server> entries in settings.xml , matched by repository <id> . We want least-privilege credentials, but two documented approaches seem to conflict in practice. Option one: a single shared read-only account per developer machine, with deploy credentials kept only in CI. This is simple t