Comment 2 for bug 903355

We'd need to think a bit about this.
I'd assume we'd use the presence or absence of a mechanism attribute.

But you also need to think about the negotiation tokens and how you get
those for credential selection and the like.
-
--Sam