HTCondor has now a notion of encrypt_input_files , in addition to encryption of output files and execute directories.

http://research.cs.wisc.edu/htcondor/manual/current/condor_submit.html

we should explore and add the use of this feature for credential transfers