Updated info regarding exposure of credentials