If you have destroyed credentials within the scope of the query posted to the passphrase.query end point and set the query parameter needSecret to true, you end up with a fatal error since there is no appropriate check whether the credential is actually destroyed or not.