clean credentials