I use credentials in the catalog because I need them only to load or save data. Therefore, I define them in the credentials.yml file, which is taken by the catalog. I also usually use the oc.env omegaconf resolver when the credential is in a env variable. I do not know if it is a good practice to use it as arguments in a node, maybe you can create a custom dataset if your objective is load or save data in that node