Add a Credential to Name Resolver SPI

We are predominantly considering this in the context of the validation side of the API.

However should still not exclude the possibility that after obtaining a RealmIdentity the validation may still be performed in the mechanism.