A DevOps team stores all infrastructure definitions in a Git repository. Recently, an unauthorized change was pushed that provisioned resources outside approved parameters, and the team could not verify who authored the commit because several developers share cached credentials on a build server. Which control should the team implement to guarantee the authenticity and integrity of each change entering the version control system?