Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.420 (Entity 5.420)
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 358

This patch appears to blow away the value of err from the loop.  If, for
instance, the specified credential is not found, the function would
probably return successfully anyway because it was able to release the
iterator.

Also, if credentials were successfully removed but the iterator could
not be released, cache_changed() should probably still be called.