SEC14 — Credentials issue

Summary: Credentials do not have a mechanism specification, a delegation mode,
specification, and an origin specification.

I believe the credentials object may be used to hold the means
necessary to support a security mechansim. It would be much less
confusing, and easier to specify, if there is one credentials
object per mechanism.

We should state that one credential object supports one
mechanism type.