launch permissions, image-waiting fn, credential tools