CredentialsOffline encrypted credential storage by default, with system keyring and migration support.