Approved investor and strategic-partner accounts only. Public requests never create credentials automatically.
Authentication responses are intentionally generic. Approved accounts use a separate credential store from the operational runtime.