use credential helpers