Move credential locking to per-use to allow for reloadable credentials.