Use json file for storing credentials (but don't track it)