Organization-scoped credentials with explicit permissions. Secrets are displayed once and never stored in plaintext.