move credential to env