just in case Hawk does need an empty credentials object