I think you can do everything in your URL or use the fs_args if you want to follow best practice in terms of credential management