AWS applications in production often use other mechanisms to pass credentials into their application.

For example, see the various ways credential can be supplied to boto3, the Python AWS client.

libmongocrypt can support these with additional help from the driver. For temporary credentials and using EC2 instance metadata, this would amount to making additional HTTP requests, and reacting to expired credentials.