Is there something like best practices to check/validate login credentials (RepositoryIdentity) provided by a user using DFS? It looks like they are only checked when a service call is made, but not when the service is instantiated via ServiceFactory methods. Do I really have to issue a "faked" (login) service call to find out? Or am I missing something?