justIN wrapper jobs use an X.509 proxy with DN /C=UK/O=eScience/OU=Manchester/L=HEP/CN=justin-jobs-production.dune.hep.ac.uk when writing, and give an X.509 proxy without any VOMS roles but with DN /C=UK/O=eScience/OU=Manchester/L=HEP/CN=justin-jobs-no-roles.dune.hep.ac.uk to the user's jobscript which can be used to read from storage.
justIN wrapper jobs use an X.509 proxy with DN /C=UK/O=eScience/OU=Manchester/L=HEP/CN=justin-jobs-production.dune.hep.ac.uk when writing, and give an X.509 proxy without any VOMS roles but with DN /C=UK/O=eScience/OU=Manchester/L=HEP/CN=justin-jobs-no-roles.dune.hep.ac.uk to the user's jobscript which can be used to read from storage.