fix: prevents credential types vars from being used as inputs/outputs unless specifically typed as secretstr

fix: prevents credential types vars from being used as inputs/outputs unless specifically typed as secretstr #21192