In org.jboss.as.controller.security.CredentialReference.credentialReferenceAttributeMarshaller() the marshallAsElement method expect credential-reference as second param, but standard marshaller (PersistentResourceXMLDescription) puts its parent into this param.

It cause that PersistentResourceXMLDescription marshaller cannot be used for marshalling objects with CredentialReference attribute.