We *really* need a ccache instance ID tag. In fact, we should probably never krb5_cc_initialize() a ccache that doesn't have such a tag. But for now cred_delete() is now safe enough.