documented CredentialStore interface