[sureglymop]

Thank you for the explanation, that cleared it up a lot for me. In astro I didn't yet use SSR, I will try this out as well.

I do still believe that it may be good to point this out in the docs more thoroughly. In general though, couldn't there be some situations where using a universal load function like this may increase the chance for some security critical logic bugs?

[benmccann]

You should only access credentials in `.server` files. We have a built-in feature that checks that you only access credentials in `.server` files to try to prevent newcomers from accidentally making any mistake in that regard.