Good point. The credential ID should never be null, but we might want to be defensive. We should add some stronger requirements on the `Credential#getId()` method to indicate ID SHOULD NOT be null.