Temporary credentials require a password change. Sessions and password verification are protected by the central server.