auth/credentials: use CRED_CALLBACK_RESULT after a callback