Module credential 

Credential handles the VM cannot read.

credential.get(name) hands back opaque placeholders, not secrets. The real values are substituted into the outgoing request by the HTTP wrapper, after the policy has already decided the target is allowed — so a script can compose a request that authenticates without ever holding the secret.

Functions

contains_placeholder

placeholder

register

Register the global credential table. Only names the policy declares resolve; anything else is an error rather than a silent empty handle.

reject_in_url

A placeholder in a URL would put the secret in a request line, and from there into every access log on the path. Refuse instead of substituting.

substitute

Replace placeholders with the real values a moment before the request leaves. Walks nested tables so a module that builds a JSON body out of its options table is covered without changing that module.