no guarantee that we will see username/password keys