credvault: the credential vault behind credctl.