...
It seems that installing HTCondor-9.0.4 via RPMs doesn't automatically create an idtoken credfile in /etc/condor/passwords.d/POOL like the documentation reads https://htcondor.readthedocs.io/en/latest/admin-manual/security.html?highlight=idtokens#quick-configuration-of-security
condor_off vs condor_drain
...