based on the docs, it feels like catalog.yml should be able to reference the credentials in credentials.ym