support passing in request-level credentials
update all actions to support request-level credential config