SMTP AUTH isolation checklist
- Unique credential per application/customer
- Restrict listener/source networks where possible
- Enforce allowed envelope sender upstream
- Map authenticated identity deterministically
- Alert on unusual volume or sender domains
- Rotate secrets and disable unused accounts