credentials-fn != credentials