clarify the options for credentials