sync + use InvalidCredentialsError