A migration leaves temporary public firewall rules and source access keys. What should closure include?

1. Publish the credentials to document the project.
2. Rename the rules as secure without changing their scope.
3. Keep every exception forever without an owner.
4. Remove temporary access and credentials after validating they are no longer required.