One thing I noticed off the bat is how Pulumi uses OAuth natively in order to authenticate to an orchestration server