If you create an application credential without using the unrestricted option, you will end up getting an error such as "Failed to create trustee or trust for Cluster".

We should document this so folks who run into this issue can catch it earlier than later. :)