Accordingly with previous discussions, we should avoid using String values when verifying credentials.

Beside that, when using the JDBC and LDAP realms, the message is wrong, indicating that String values are also supported.