key, or other authentication credentials for first time logins, utilize a "first login" mode
that requires the user to enter a unique strong password or key.
If the software must contain hard-coded credentials or they cannot be removed, perform
access control checks and limit which entities can access the feature that requires the