from [1]
[1] https://docs.softwareheritage.org/sysadm/mirror-operations/onboard.html#how-to-create-the-journal-credentials