I used to hardcode credentials in my old code, so I avoid looking at it. Ever. In fact, anyone who has ever reviewed it mysteriously disappeared.