Invalidate old tokens on logout.
Serialize credential as a whole.