I do like the paraphrasing more as requirement language, but is there any way to tell the LRS what the expected behavior is?  It seems to putting these credentials in a second class, but is there value in doing that as opposed to recommending (strongly or weakly) against it?