pub fn credentials_path() -> Result<PathBuf>
Absolute path to the credentials file. Caller is free to dereference this even when the file itself is missing; the read functions handle ENOENT.