Sources without credentials are skipped — collectors never fabricate data.