If credentials can be filtered with branches/tags in CircleCI web administration page, it can prevent accidents.
Even if a repository deploys an application on a specific branch/tag (like master, vX.Y.Z tags),
an AWS credential is available on any branches. Filtering branches in workflows: in circle.yml
can be changed accidentially. It will break services easily.