LDAP bind credentials will be used during bind. They may additionally be used during queries, while chasing referrals. As such, these credentials objects must live longer than the complete operation, in both the pooled and non-pooled codepaths.

When credentials are dynamically updated, via setParameter, they should be eventually propagated across all connections after the current operation completes.