clear the credentials of this principal, not the session"