fix review comments
Write credentials store with user-only permission,