CRM Connection
Bighorn's AccuLynx key, entered here and stored encrypted. It is never read from an environment variable, so it can be added, rotated or revoked without a redeploy.
No credential stored. The job sync stays off until one is added.
How the key is handled
- Encrypted with AES-256-GCM before it touches the database, the same scheme the concierge uses, so one rotation of
CRM_CREDENTIALS_ENCRYPTION_KEYcovers both apps. - Only the last four characters are ever sent back to a browser.
- Decrypted in the server process at the moment of a call, never cached in the page.
- A tampered value fails to decrypt rather than returning something wrong: the auth tag is verified.