- Access control on all sensitive functions
- Immutable credentials (Soulbound Tokens)
- Time-based expiry support
- Secure private keys with hardware wallets
- Verify student identity before issuance
- Use time-limited delegations
- Protect your principal
- Verify credential issuers
- Keep metadata backups