what exactly does AFS require from authentication code?  if someone
	could give me pointer i would be grateful.

	openbsd login.conf has "classify" and "approval" capability, which
	seems interesting/may be useful here.

itojun