factored out uid/gid to single mc.cred obj