[wip] credentials