Add note to options.credentials on server inject.