s4-rpc: don't use s->credentials after it is freed