Any credential type works — the claims are free-form JSON. The service stamps its did:web issuer and signs.