[AlphaCommerceHub] A merchant is not allowed to change his API password (`UserID`) himself even if he thinks the password is compromised

I have drawn this conclusion from the following response from the AlphaCommerceHub support:

The UserID will only be present in the on boarding email or by contacting support.

I have got a response from the AlphaCommerceHub support:

Correct, this is an admin function at present, if they believe it is compromised they should contact support.