Implement a configurable CredentialMapper

i.e. Subsystem will need a CredentialMapper it can create based on user config.

May want to consider wrapping the default impl so we can fallback there where no mappings found.