External providers describe their credentials through
get_credentials_schema(), but nothing explained what the credentials
form accepts. Document the supported fields and the discriminated union
that offers several authentication methods within one secret type.