document credential handler annotations