Mail with the password or OAuth token off the heap - sending (SMTP) and receiving (IMAP, POP3). seclume connects, encrypts with its own TLS 1.3 and logs in with PLAIN, XOAUTH2 or the protocol's own login written from native memory; Jakarta Mail gets the logged-in connection under the standard protocol names of a session seclume sets up, and never holds the credential. Works with Spring's JavaMailSender, Spring Integration and Camel through that session.