Alright. I was fixated on password when I read credentials. The issue is solved now.
But here is a question. Since turning that permission to admins and mods doesn't really stop users from changing the password (rightly so), and because there is no practical reason for admins and mods to approve username changes (unless there is something I am ignorant of), what is the significance of "Edit credentials" permission?