the api credentials are unique for every user and we use the credentials for the default user but I see your point in having them in a separate object