It likely doesn't... it probably reads it from the environment or a config role, and since it was in production it had the production credentials.