T720: cache plugin stores creds in file