Firebase credentials leak