should be able to handle a missing pub/pri

invalidate login should be able to handle a single component credential