Not able to do that. There are three distinct ways to auth against Identity:

1) auth with creds
2) auth with creds+tenant
3) auth with token+tenant (rescope token)

In scenario #3, credentials are not necessary. I started down the road of using ```requires```, but ended up yanking them due to the above.