Yes agreed, although the password is never stored in the DB, Credential class is not an entity but we created a ticket to remove this class and refactor the Developer class https://issues.jboss.org/browse/AGPUSH-509