Credentials scoped to live systems — managed, rotated, and audited more carefully than test credentials. The FDE waits for these before final validation.