protect production credentials