When deploying an application to a Kubernetes cluster that needs to securely connect to another service using a username and password, what is the best practice to ensure the credentials are used securely across multiple environments with minimal code changes?