removing credentials from config