move credentials out from repository