default
The selection the wallet would make itself, for an app with no policy of its own, or to start from: the first answerable option of each credential set, and each query's first credential (all of them when it takes several). Throws noMatchingCredential when the request can't be answered.