More canonical signature for credentials vmethod
Handle no-authentication case as passthrough