While the planner now detects what credentials are required and pick up the settings from for example the site catalog, it never verifies that the credentials actually exists or are valid. I know we used to have an x509 check. I think it is time we revisit this and see if we can provide better feedback to the user before a workflow starts (and potentially fails because a credential does not exist).