Default DELEGATE_JOB_GSI_CREDENTIALS=True in HTCondor does not play well with the glideins
Starting condor v6.7.19 default for DELEGATE_JOB_GSI_CREDENTIALS is True. That results in the delegated proxy's lifetime shorten to DELEGATE_JOB_GSI_CREDENTIALS_LIFETIME which is 1 day.
After applying various lifetime/retiretime/thresholds etc, this results in the glidein with not enough time to run.
To delegate or not to delegate should be at the discretion of the service operator, so it is best to set the lifetime of the proxy same as that of original proxy by default. These settings should be applied to the schedd's config
DELEGATE_JOB_GSI_CREDENTIALS_LIFETIME = 0