8.58Interview-ready answer: Salesforce security

“I'd use a dedicated Salesforce integration identity with least privilege and OAuth-based machine-to-machine authentication, such as Client Credentials or JWT depending on the organization's security model. Client secrets, certificates and other credentials should be externalized, independently rotatable and never logged or committed in plaintext.”

Also excellent.