Review how much of the RealmIdentity interface can have default method implementations, e.g. verification could be implemented if we can obtain the credential.

Credential conversion is also another one we could cover, a mechanism should be able to start querying from the most specific type of credential it understands, if default methods on the realm can handle the conversion it will mean the mechanism can ignore the conversion.