documented credential storage