images with valid credentials are lazily loaded.