tomcat modules/states: get credentials like config.get