document use of credentials.json