Security by obscurity refers to obscuring the design of a system, not obscuring credentials.

Hiding your password isn't security through obscurity. Hiding the fact that you need to say a password to get into a building is.

Protecting your encryption keys isn't security through obscurity. Hiding which encryption algorithm you are using is.