Handle closing credentials providers properly

As follow-up work from from making resourced managed, revisit how closing is handled in credentials providers to ensure underlying resources are released properly and that closed providers do not return (or retain) credentials.