Added a couple notes around credentials safegards