Outbound clients can gain substantial flexibility by being able to use IdentityCredentials directly. This allows a non-type-specific object like a byte[] to be interpreted as many different types of credentials.