Upon successful authentication in login() method, derived classes should add public credentials to this set.