New capability identifies, attributes and validates API keys, OAuth tokens and other machine credentials stolen from developer and employee endpoints ...