__Note__: The provided Credentials Provider's `fetchAWSCredentials` function is called once at the start of the liveness flow, with no token refresh.