Clean up hokiness in default creds values.

The new implementation is cleaner and accomplishes the same result.
Plus, it avoids attributes magically appearing "some time after object
instantiation".