fix(provider): allow saving a config whose credentials come from elsewhere