@dansup

The latter is the only sane way to go, separation of concerns, no shared secrets.