A new file watcher monitors .credentials.json for mtime changes and automatically invalidates the credential cache when the file is modified externally.
Evidence
Credentials watcher — kA9() at line ~179473 (search for ".credentials.json")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.