Is there a risk of an NPE on this.credentials?