encrypt credentials
get credentials encrypted as b64 env var CREDENTIALS