I thought I replied to this, but in preparing to close this out I can't see the response. So here you go: ReplaceCredentialInternal is called by ReplaceCredential and ChangePasswordInternal. The former calls CommitChanges, the latter is only called by ChangePassword and ResetPasswordWithToken which both call CommitChanges.