Consider [session cookie; certificate-chain intermediate; public verification key; account password; public encryption key; refresh token]. Select all entries that are credentials or key material designed for public distribution.