hopefully the fake credentials are ignored