If set, the username of the first resolved credential is exposed under this environment variable inside the block, so it can be passed to ssh -l "$SSH_USER". Leave it empty to not expose the username.