https://dev.to/jaspernoboxdev/the-developers-guide-to-credential-hygiene-5l9