externalise credentials from config files; externalise environment