add two execution paths to reflect the ability to provide a credentials file
hooks are traversed remove todo
Merge pull request #138 from eads/0.9-beta5

credentials from file