Give external users a 'credentials' field