[Serusers] consume_credentials() bug!?