When a user doesn't have the permission to "Read credentials", he cannot list his own credentials. However he can access to the credentials page (via his name > Credentials), he cas add, delete and update his credentials but he just cannot list them.

The screenshot list.png has been taken after the add of a user/password and as you can see the list stays empty