source creds retrieved dynamically by the script