Re: Project-scoped app creds - Best practice