fixups for tests that actually require creds