A workload still requires a supported credential rather than managed identity or federation. What is an appropriate operational practice?

1. Give the credential every directory role to avoid failures
2. Ignore its expiration because all credentials are permanent
3. Protect the credential, minimize permissions, monitor use, and rotate before expiry
4. Commit the credential to a public repository for reliability