Only DCS commands are using provided credentials and are writing them in clear into the MOF files.
Everything else is running in current users context.
This is confusing. You may name the parameter "DSCCredentials" or use the Credential parameter to run the full script in the context of the provided credentials.