non-literal credentials 3.0