* waffling on embedded credentials