Add option/setting to suppress `erase` operation

[becm]

Feature description

Static credentials (tokens) in automated contexts are normally valid until changed explicitly.
Transient failures should not lead to erase, especially as restore requires manual interaction.

Implementing this in a central place would be preferable to modifying each provider.