This test is an important privacy check. We make sure the manifest from the argument to credentials.get matches the IDP's root manifest.