remove credentials from public