Handing over access was a reasonable act of trust. The business should still hold the root credentials, and a supplier worth keeping hands them over on request. Here are the five, and how to ask for them back without it being awkward.