Drafted from the public code and docs, so names and roles only, never
values. Blank cells are for the operator to fill in. Marks the credentials
held by more than one app, which are the ones most likely to break on
rotation. Offered on co-op/support#17.
