Fix security issue in credential store

As pointed out by @haf the initial implementation of the credential store
had a security issue to to constant entopy bytes. Now the entopy bytes are
generated for each source and saved next to the source.