CredOps monitors expiry timelines for the credentials that keep production running. Only metadata and expiry dates are tracked. Secret values are never required.