User is allowed to bring their own credentials. If they have Item.CONFIGURE then they can use Jenkins credentials for tagging also