Hawk credentials shouldn't be mandatory