How do you handle credentials safely?