fix credential reuse.