move secret info to credentials config