Protecting Sensitive Credential Content during Trust Negotiation