Prevent credentials from being exposed via identity options