(auth-source-search): Don't try to create credentials if the caller doesn't want...