checks only sources where query credentials are found, so that request on all sources can work