credentials file hidden