strip out Amazon credentials