Regarding credentials, my base instructions shared across all agents and all harnesses is that all credentials are accessed through a specific powershell script and should never be shown or written to file. This seems to work with pi, opencode.