Keep only one xcred object globally instead of one per connection. With verification, this object gets pretty huge and there's no need to have it more than once.