Streamline the API: eliminate activate() and fold it into a new create(),...

Streamline the API: eliminate activate() and fold it into a new create(), rename free() to destroy(), make unpack() return an allocated credential instead of being passed a 'blank' one