Class(sec:BiometricToken partial restriction(sec:credentialVerifiedBy someValuesFrom(sec:BiometricAuthenticationSystem)) sec:Credential)