After thinking more about it, I'm not sure if we should ship project credentials with our sources. It sounds safer to allow people to supply their own through parameters or environment variables.