audit: acquire creds selectively to reduce atomic op overhead