Ensure the credentials dir exists before setting ACLs on it

src_assets/windows/misc/migration/migrate-config.bat

@@ -31,6 +31,13 @@ if exist "%OLD_DIR%\credentials\" (
     )
 )
 
+rem Create the credentials directory if it wasn't migrated or already existing
+if not exist "%NEW_DIR%\credentials\" mkdir "%NEW_DIR%\credentials"
+
+rem Disallow read access to the credentials directory for normal users
+icacls "%NEW_DIR%\credentials" /inheritance:r
+icacls "%NEW_DIR%\credentials" /grant:r Administrators:(OI)(CI)(F)
+
 rem Migrate the covers directory
 if exist "%OLD_DIR%\covers\" (
     if not exist "%NEW_DIR%\covers\" (