Per-user accounts, no shared logins. Every approval carries the name of the person who made it.
Failed attempts are limited and logged. Testing-build accounts are documented in the README, not here.