use external file instead of listing credentials in file