Major Description
The Admin UI new descriptor form allows for the creation of descriptors without having specified a provider configuration. This should be disallowed.
The runtime handling of descriptors also assumes that a provider configuration reference exists, but it should rather validate this, and report an IllegalArgumentException rather than a NullPointerException.