velruse: config mechanism for instance credentials