If missing cred, then status is not-authenticated.