auto-upload credential and auto-refresh