can't you just forget you ever saw the hardcoded credentials? that seems like the safest course of action to me.