should be passing the caller's gid not the delegee's gid to Credential.set_issuer_key...