Server-Client

If you have embedded the credentials in the source code, then yes, a technically competent user could extract them from the binary.

Load them from a file, ensure that file is only packaged for dedicated server builds (see reply in this topic).