Extension always adds things, it cannot remove things.
The normal way to remove things is by restriction. But restriction can only remove things that were optional in the original (If type R is a restriction of type B, then every valid instance of R must also be a valid instance of B).
I think you need to define your existing Credentials type as an extension of some new type that does not include the Authentication attribute.