forwarding tokens to other machine

[Herbert Huber]

Yes, the server key has to be available to the batch scheduler. Another
possibility is a small client server program, where the client transmits
a valid AFS token to the server and the server extends this token and
sends it back to the client. This has the advantage that the secret
server key has not to be available on machines where normal users can
login.

/Herbert