fanotify-based sentinel that blocks unauthorized access to credential files (browser profiles, password managers, SSH keys).