Upon successful authentication in login() method, derived classes should add private credentials to this set.