Record credit failures

Another step of #2508. Fixes #1811. Built on top of #2579.
> And we're not worried about MITM because Balanced isn't hitting us from a coffee shop, and anyway they're hitting us over SSL. Right?

Yes, except SSL doesn't really help us in this case.