Restricted data is accessible at the DMC and likely other data centers using credentials (username/password). ROVER should support this mode of access.
The credentials should be used with both the availability and dataselect services.
The credentials should be fetched from a file that could potentially contain credentials for more than one data center. This is in anticipation of ROVER supporting federated access across data centers.