moving credentials command under token subcommand as