credential: add support for multistage credential rounds