* fix(security): harden proxy auth and default credentials * fix(security): address proxy and credential feedback