I don't think we want to default to DefaultCredentials (here and below) (see #660)

/cc @ethomson