Accounts

One login per tool, so usage is traceable and a leaked password can be cut off on its own. Passwords are stored only as a one-way hash.