separate credential configulation