ACK. Nice, I'd been contemplating writing something like this when writing all the boilerplate code for system subcollections. This will show me how to do that. One nit:
+ description "Delete specified Credential entity" Doesn't need "Credential". Regards, Dies Koper