The credential is proving provenance. [edit: obviously once a credential is handed out it can be misused but any such attack would put signing materials in the

The credential is proving provenance. [edit: obviously once a credential is handed out it can be misused but any such attack would put signing materials in the hands of an attacker too.]