Allowed credential types should be a bitfield