changed decrypt-credentials to unlock-credentials to squash verb warning