Closes #287 - assets no longer require a credential