fix ccaches getting the wrong owner when refreshed
    
    Also try to drop privileges to the target user when reinitializing or
    refreshing credentials, for the sake of login (#822493), which started
    doing this around 2.21.