credentials from file

Maybe should be a cmd line flag but it's part of tarbell_config for now