all can see credentials in curator.yml

[wzooff]

Hi.
If file will contain credentials, any user can read it.
Additionally we can see credentials 'http_auth' var in chef-client log (diff) during chef-run

[cyberflow]

The first part of issue was fix in #12