Credential is not changing to Locked state even after multiple consecutive validation failures