Record credit failures

Another step of #2508. Fixes #1811. Built on top of #2579.
And we're not worried about MITM because we're using SSL and Balanced isn't hitting us from a coffee shop, right?