move creds out of code