@KasTasMykolas @bagder Right. The credentials problem is not new, and seems like an existing nightmare waiting to bite someone - like for example can you do SSRF to fetch a private key file your user account has access to?
But indeed the direct "RPC" (I'd call it RCE) aspect is new vs SCP and SFTP.