Testing for Use of Hard-Coded Credentials