Because when there is only one credential, it can lead to errors and make it difficult to determine if weak passwords exist.
NetSPI
