make sure credentials do not leak