Lure

Plant fake credentials and get alerted when an attacker uses one. Stdlib-only, no passwords out.