MechanismOID
fix double release
kGSSICBrowserIDIdentity
CALLER_UI should just translate to BID_ACQUIRE_FLAG_NO_INTERACT
add cached attributes
release cached attributes
export _BIDAllocIdentity
more helpers for CredUI
various crasher fixes