handle credentialed specs more gracefully