The following should be children of Credentials: - API key - Digital certificate (???? should we?) - Multi-factor credential - Session key