credential: refuse to operate when missing host or protocol