repeated credential risks