making-credentials-secure