new PAGs for existing programs

[Peter Lister, Cranfield Computer Centre]

I'd like to run arbitrary binaries with their own AFS tokens in their 
environment independent on the parent (e.g. so that the process so run can't
have its token changed subsequently by the parent, or so that a process
can use it's own Kerberos ticket). A version of aklog (I have the
source) which, instead
of exiting, exec's a command passed to it as an argument would do nicely.

1) Has anyone else written this to save me the bother?
2) If not. can someone show me a code fragment to set a new PAG, as I can't find
anything in the AFS paper docs or programming manuals to tell me. pioctls seem
to do most things, but not this (VIOCSETTOK seems to work in the existing PAG
only). From previous references on this list, I gather there's a new system
call, setpag(); do I just call this with no args? Does it return anything
meaningful? 
3) Is Ed Zayas going to document this at some point?

Peter Lister                                    [EMAIL PROTECTED]
Computer Centre,
Cranfield Institute of Technology,        Voice: +44 234 750111 ext 3157
Cranfield, Bedfordshire MK43 0AL England    Fax: +44 234 750875