Session credentials still stored....

If you setup a session with session specific credentials and then later change to credential repository it still saves the session specific credentials. Not only that but I can't clear them without going in twice to save it as session specific and then as repository again. This unnoticed behavior has led to several credentials not being cleared and thus being a security risk.