make s3 creds optional