credentials.properties no more hardcoded