removes sensitive credentials