non-literal credentials 2.0