For now, if one issues a credential to an email that doesn't have an existing wallet attached, we automatically create the wallet - without an Auth Token - and associate the email to it. The credential is then inserted into this new wallet.
Later on, when the user logs in with the relevant email and authenticates, the Auth Token for the wallet is created and the wallet and its credentials can then be accessed.