s3n credential is stored in core-site.xml and it should be kept private.