Recommended Practice

In the Remarks section there is this sentence:
"...the recommended alternative is to use an opaque handle to credentials that are stored outside of the process."

This would be a great place to link to something that describes that approach in .Net.

---
#### Document Details

⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*

* ID: a5045793-4162-9bde-d512-e36fd6f462eb
* Version Independent ID: 969c97af-d216-7141-bc67-cf6f89949073
* Content: [SecureString Class (System.Security)](https://docs.microsoft.com/en-us/dotnet/api/system.security.securestring?view=netframework-4.7.2#HowSecure)
* Content Source: [xml/System.Security/SecureString.xml](https://github.com/dotnet/dotnet-api-docs/blob/master/xml/System.Security/SecureString.xml)
* Product: **dotnet-api**
* GitHub Login: @rpetrusha
* Microsoft Alias: **ronpet**