connection can be instantiated, holds credentials
endpoint credentials should be per endpoint