setting.py hide credential information