exposes admin credentials