allow user/password as aliases for readonly