Make it explicit that multiple credentials are allowed