As we discussed on IRC, this creates a fun race condition if this method is ever called reentrantly while it's waiting for the network request to finish: your unbundle call might get the wrong version of bundleKey. Might be better to chain the unbundle call off the `self.request.send()` instead of the callback chained to `hawkCredentials()`.