@Tahn I use Token Based Authentication when possible to avoid putting clear text passwords in scripts. Failing that, a custom record limited to admins only seems reasonable to me.