Secure access — credentials are set in .env