warning about credentials being sniffed