use placeholder variables instead of real credentials