The knowledge element must include measures to mitigate against being disclosed to, or discovered by, unauthorised parties, including limits on attempts and protection against logging or screen capture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.