Credentials management policy. It specifies the management details for each supported
credentials type. It defines parameters such as credential lifetime. It may define even
a very complex schemes for some credential types. E.g. it may define a complete security
questions.