Moving credentials out of code into environmental variables