The security implications of self updating credentials