Never request plaintext credentials; use documented environment setup.
