Internal API for creating/removing credentials