extract the sonatype credential to the top level