Do not include access tokens, refresh tokens, certificates, E2EE keys, phone numbers or session files in issues.

Report security problems privately to dev@cybertkr.com. Include the affected version, impact and minimal reproduction steps with all credentials removed.