credential-manager: Prefer local over global sets