Configuring default credential policies