Update note about embedding credentials