update to 2.4.9
    
    - fix a memory leak when obtaining credentials (static analysis)
    - change the default for subsequent_prompt to be false when the module
      is called to change passwords, so that we only prompt for passwords
      when we're called to change passwords (#1063933)