It’s unclear what a ‘credible’ threat actually looks like