the resource for which we are demanding a credential.
The username that was embedded in a "userhost"
remote url, or NULL if not included.
a bitmask stating which cred types are OK to return.
newly created credential object.
Signature of a function which acquires a credential object.