[.gitignore] add .credentials