1. A computer-implemented method that is adapted to executed by a processor to perform the method, comprising: receiving a request to audit a credential for a principal within a secure environment; inspecting a history for the credential to perform the audit; and generating a report for the credential, wherein the report masks the credential and includes an indication as to whether the credential complies with a policy.