protect the cred file