if i am to set up scheduled backups at client end then i am forced to expose the SYSDBA username and password in the batch file am i not?

how can i facilitate backups without giving away our crown jewels?

thanks