Locking refresh of credentials.