That's absolutely correct!
In order to use only newly created credentials, the tag must be set to false within the Control Center config tag - the specifics on this can be found in the HiveMQ Control Center documentation here : https://docs.hivemq.com/hivemq/latest/control-center/configuration.html#user-configuration
Feel free to let us know if you have any additional questions either here, or on the HiveMQ Community Forum - we are always happy
Best, Aaron from the HiveMQ Team