I wouldn't rely on anything other than rotating leaked credentials.