No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Could you have the destroy run a script that also fetches updated transient credentials first?

Yeah, one option is to have the local command 'delete' call out to a .sh file rather than trying to run the command directly.  It's sort of a pain, but definitely an option.