yep there should be no login/password going public