hide ftp credentials!