Move credential helpers to their own (optional) header