credential export prevention