@SuppressWarnings("unchecked")
public List<PasswordCredential> getHistoricPasswordCredentials(User user, Long securityDomain)
{
Criteria criteria = new Criteria();
criteria.addEqualTo("principalId", user.getId());
criteria.addEqualTo("type", PasswordCredential.TYPE_HISTORICAL);
Query query = QueryFactory.newQuery(PasswordCredentialImpl.class,criteria);
List<PasswordCredential> list = (List<PasswordCredential>)getPersistenceBrokerTemplate().execute(new ManagedListByQueryCallback(query));
for (PasswordCredential pwc : list)
{
// store the user by hand as its configured as auto-retrieve="false"