less potential for pushing credentials + small typo fix