hide credentials