We can cause credentials in a KEYRING cache to be automatically cleaned up when they expire, but we aren't doing so yet.