decrypt credentials file on-the-fly