get_subject() returns an empty string if credential has no gid object