Allow discarding any cached principal for a collection of credentials
satisfying a given predicate.
Merge pull request #570 from florinn/invalidateCredentialsByPredicate

Invalidate credentials by Predicate