remove credentials from source