credentials: Allow the secrets.tdb password to be newer than the secrets.ldb password