clarifying user cred settings