Add some notes about credentials.php