security, loading credentials