The same method is found in the MediaPlayer framework.

- add string constants for valid credential item keys
- add factory methods to eliminate the need to using keys explicitly
- simplify implementation and validation logic

Refactor and fix in `-buy_JSONForValue:` as well as other refactoring. Move a comment to where it is most applicable.