Watch this video on YouTube
The credentials that are provided by a user as part of their claim to be authorized need to be treated as: