Refreshes this principal's credentials in place if they've expired; a no-op while they're still valid. Safe to call concurrently from every connection sharing the principal: an expiry is refreshed once.