Improvements to the XML based credential, still no verification