Most security advice for small companies sounds like it was written for a Fortune 500. This is what credential hygiene actually looks like for a 5-50 person team, shipped for a real client, sanitized and generalized.