better control over what credentials a frontend passes to the factory
I noticed that the FNAL prod factory was getting all credentials even though it doesn't have, for example, the HLT. I thought this might be an issue with the addition of BOSCO and credentials that are "long lived".
Could we change the frontend so that the credentials being sent are only those supported by that factory's entries? Is there a cleanup functionality that gets rid of old/unused credentials (I can't remember) so these long lived credentials don't stick around indefinitely?