I added a 'private' hosted feature layer from ArcGIS Online in ArcMap and exported a Lyr-file. I'm able to use this lyr file to add and show the private hosted feature layer in any other ArcMap installation without using any credentials. The question is: Why? Are they somehow saved in the lyr? How long will this work (so, do I have to update the lyr?).