moved the credentials file to the -dist one

not that it gets commited with real data somewhen