Where would you suggest putting the sensitive credentials?