note about credentials usage