Do not expose credentials through /config