fallbacks to envvars for credentials, build fixed for ojo