switch to c:select to support in-place addition of credentials