drop support for legacy credentials