flags for api creds in tests