code: @InterfaceAudience.Public
      public boolean clearAuthenticationStores() {
          if (getAuthenticator() != null) {
              if (!(getAuthenticator() instanceof Authorizer) ||
                      !((Authorizer) getAuthenticator()).removeStoredCredentials())
                  return false;
          } else {
              // CBL Java does not use credential. No thing to do
          }
          replicationInternal.deleteCookie(remote);
          return true;
      }
docs: Deletes any persistent credentials (passwords, auth tokens...) associated with this
  replication's CBLAuthenticator. Also removes session cookies from the cookie store.