`@adrecord` points out in PR #1324: > `ch-image build` with multi-stage Dockerfiles can reference images from different registries with diff creds, or anonymously. I realize that command provides a `--password-many` option but any changes to authentication should consider the impact there. If we're going to change authentication substantially we should maybe do it in light of needing different auth preferences/creds per registry? This is something the current registry-agnostic userid/pw env vars don't currently support. For example, I'm guessing there's currently no good way to do a non-interactive image build that accesses multiple registries with different creds. If we're gonna rethink auth, it would be nice to do it with use cases like this in mind.