Why does one need to pass both credentials and client

Why does one need to provide to functions like `createBucket()` both the credentials returned by `client.getCredentials()` and client itself. What is this nonsense. Should one call getCredentials every time he calls an api function - or should one cache them between calls?
Why doesn't the client itself take care of it's credentials - can one leave them out?