Agent credentials should be stored in a secure, automated credential vault, with policies enforcing regular rotation, access logging, and immediate revocation if misuse is detected. Organizations must ...