SecureLogin stores sensitive data under directory attributes of the user object. Sufficiently restrictive ACL must be configured at the Directory level.