Method and apparatus for access credential provisioning