Add a FIXME note for discarded credentials