remove credentials from environment variables