move credentials into fabfile