handle credentials when DEPLOYMENT_PRIVATE_KEY isn't in the environment