use OKS OksKernel::validate_credentials() method