WIP canonical credential data bag