I just wonder at what time the credentials are used by the ZCM server.
Are they only used when agent gets deployed to the server or workstation or are they use to any later time as well ?

If that would be the case I think it could get complicated in case you change the passwords on the devices and need to change them in ZCM at the same time.