1. A method of securing a server runtime environment, comprising: generating a first unique identifier at startup of the server runtime environment, the first unique identifier being an identifier that is valid for the server runtime environment; storing the first unique identifier in a private location of the server runtime environment; receiving a request to instantiate a first credential object; and inserting the first unique identifier in a private field of the first credential object.