Are credentials tied do holders?

No, we currently don't have holder binding. Credentials are not linked to specific wallets, so there's no ownership or reverse traceability.