All runbook scripts should use the built-in credential capability

[fabricekrebs]

Runbooks requiring sensitive information such as usernames or password credentials are using variables set as secrets.

The runbook resource of the "credentials" kind should be used instead, which will make variables definition cleaner and allow external vaults to be used.