take a look how we handle this in active merchant, we let people put credentials in their home dir and load from there.

active shipping might do this already.