Joris Giovannangeli, one of the Summer of Code students for DragonFly, posted his thoughts on credential descriptors – have a read.  He is working on capsicum and DragonFly, so this is a natural thought process.