DevOps: Hard-Coded Credentials Are a Real Risk