Just started testing a migration from 8.0 to 8.5. I'm was using digested passwords with digest="sha-512" in my realm for manager and i noticed in the migration doc that it said the digest property was removed. Took me a little while to figure out that this was replaced with the CredentialHandler. Might to nice to see a little blurb after the notice to say, this is replaced by CredentialHandler. See https://tomcat.apache.org/tomcat-8.5-doc/config/credentialhandler.html
-Tony