fix: property regex, it can have "-"
fix: scope fallback properly
new: exclusions
new: credentials