Any update / insights on this? Just got the same issue starting a new project. Https works fine but is a pain to create credentials for each package.