The library does not export private keys or require applications to hold wallet private keys.

Do not log credentials, key material, raw signatures when sensitive in the application context, bearer tokens, service account JSON, or production-only values.

Use least-privilege IAM. Runtime signers should only read public keys and sign. Provisioning tools should own keyring/key creation permissions separately.

Custom providers are a trust boundary. They must sign exact digest bytes and return signatures without changing profile semantics.