VaR and expected shortfall in portfolios of dependent credit risks: Conceptual and practical insights