Are you not worried about running into legal trouble with these things? It seems like a gray area.
Also, what platform do you use to sell these things? How do you know the buyer won’t just take the credentials and not send payment? Or how do they know you won’t take payment and refuse to hand over the credentials?