Why do we need to make `credentials` public? I don't see anything else in the pull-request that needs it to be.