We can probably defer but I will see if I can fit this one in.

Splitting these methods in two looses the complex enum we have and allows credential acquisition to be handled independently from evidence validation - we have a default method for evidence validation, we could still have a default method for getEvidenceSupport which aligns with it.