Ugh. I understand the need but I hate these kinds of workarounds. A service credential without a meaningful URL makes no sense. Can we make it private or protected to reduce the likelihood of misuse?