Consider [public TLS certificate; refresh token; public encryption key; session cookie; account password; private signing key]. Select all entries that are credentials or key material designed for public distribution.