A monitoring script performs a login with a test account. What is an essential security practice?

1. Let tests create unlimited real purchases without cleanup rules.
2. Use a production administrator account in a public script.
3. Log every password and session cookie for all viewers.
4. Protect its credentials, limit the account's privileges, and control test side effects.