Hidden Credential Retrieval, Revisited