dbt Architect Certification Exam

Your team is setting up a production deployment environment in dbt and is deciding how to authenticate the connection to the data warehouse. A developer suggests reusing his personal SSO-based OAuth credentials so the deployment jobs run under his identity. Why is this approach discouraged for production deployments?

In your dbt project, a snapshot writes to a schema named prod_snapshot. You need developers to be able to read from that schema when working in the dev environment, but only the production job should be able to both read and write to it. What is the recommended way to enforce this?