HTTP creds need to be held by transport object.