Credentials for Deployment Projects and/or Environments

[Rodion Alukhanov]

Production team wants to create a own deployment projects with a production environment. The idea is to make this project not available for developer team.

Where should they store the credentials for the production server? One can attach "Shared Credentials" to a classic Bamboo project. But there is no such feature for deployment project.

Is hard-coding the credentials or storing it using non-secure "Environment Variables" the only possibility?