[ivanbakel]

There is a real difference in company impact between leaking your code and your credentials. If your code and credential policies are the same, your company has a serious problem of priorities, since it's either not protecting credentials enough, or it's slowing down developers too much.

[staofbur]

The trick is to make sure that if the credentials do leak they are useless.