Dry a little more
Dry DeploymentCredentials controller, improve permissions checks