CRED: Wrap task credential accesses in the core kernel