Spec: Include an invalid credentials error on all calls that get the credentials to use

[govint]

All calls to the plugin that get the credentials as an argument must include an error to handle invalid credentials.

[jdef]

error codes were rewritten in #115. is this sufficient, or is there still a need for changes here?