add two execution paths to reflect the ability to provide a credentials file
hooks are traversed remove todo