Protected with a signed, HTTP-only owner session. Credentials are stored only in the server environment.