Credentials stored in PHP session only. Never written to disk.