credential provider: Never store a token as a member