Do not include credentials in issues. Report vulnerabilities privately to the maintainer through GitHub's security advisory flow. The preview session is experimental and does not implement authentication; screen locking delegates to Hyprlock.