The sal tool (https://sal.toolforge.org) displays data stored in the Toolforge Elasticsearch cluster's 'sal' index. Writes are handled by the stashbot tool.
Previously sal did not require a named user for reading the index, but a recent library upgrade has changed things so that POST is used for accessing http://elasticsearch.svc.tools.eqiad1.wikimedia.cloud/sal/_search (T247715). This means the tool now needed access credentials. For the moment it is "borrowing" the credentials of the 'bash' tool, but it would be better to have separate credentials.