default credential support