Managing credentials in a published add-on

[Finn Smith]

I'm close to finishing an add-on that I'd like to submit to the marketplace. My design relies on data that I'm storing in MongoDB.

• How do you manage credentials in published add-ons? I've been using script properties, but I don't know how secure it is, and I understand that there are limits on operations per day.

Related to this, my add-on is caching some of the non-sensitive data it fetches from MongoDB. Am I correct in understanding that the limit on operations per day applies to each installed instance of the add-on? That is, if 10,000 users (yay, success!) are using the app and write to the cache once a day each, then is it still just 1 operation? Or will that be 10,0000 operations counting toward the limit?

Thank you!