security: In doc strings for IdentityManager, describe optional values.