updated note about Automatic's new security that disallows us to see the credentials