Add option/setting to suppress `erase` operation

Feature description

Static credentials (tokens) in automated contexts are normally valid until changed explicitly. Transient failures should not lead to erase, especially as restore requires manual interaction.

Implementing this in a central place would be preferable to modifying each provider.