Same deal here, I'd say better to just only pass `credentials` if they're present.