Don't store credentials by default, only store if enabled on a per session basis