Provider credential safety: provider connections are AES-256-GCM encrypted at rest. Credentials are never returned after you save them.