GL: recover public cred in NIS+