clarifying binding credentials