Note fingerprint handling in transcript

It’s crude, but will do for now
Better handle default credential when username is known