cleanup SPI, don't double save creds, add delete API
make GSS stuff for CUICredential a category, don't autorelease objs