Title could be read as exposing by means of an app dedicated to exposing said credentials. Hackernews suggests something else, but hasn't really outlined the expose-action.

The text of the decision should be paramount.