YJ Credentials API stores credentials in Distribution Service

Includes accountId, onBehalfOfAccountId, onBehalfOfPassword and credentialsHash

The onBehalfOfPassword must be stored using a configurable public key encryption scheme.

• The logging of requests needs to have the passwords redacted.

• The private key should NOT be stored in the YJ Credentials API or anywhere on a front1 server. The private key will be used on the core server to decrypt the passwords in order to contact YJ API.

This ensures that a compromised front server cannot leak YJ credentials in a usable format.