Credstores need the CA distrib for connecting to VOMS servers. At least the ca_policy_igtf-classic is needed.