Move credentials to data bag, support multiple buckets