ignoring all the super secret API credentials