forward flags to internal
just change for credential status in Cansubmit
disable autologin on initial cred population
filter providers on kCUIUsageFlagsInClassOnly
remove cruft