client-go credential plugin