Until all the Credential consumers support the Usage Tracking API this feature might give a false impression that Credential is not used and can be deleted while it is still in use by the plugin which simply does not report the usage.

Generic disclaimer or a way to detect and report the plugins which are not reporting usage should failproof this feature a bit.