We will need to review if this is actually required - however with credentials now being query-able by String we may want to support overriding the mappings used by the CredentialMapper either for custom mechanisms or custom realms.