A notebook needs an external credential where identity-based access is not available. What is the appropriate handling?

1. Put the credential in a table description
2. Commit it to Git to make runs reproducible
3. Use a supported secret-management integration with limited access
4. Print it in every job log