You are right that authenticating any principal for a long time
in AFS is a problem.
I have built a system for running long running jobs, such
as a daemon, where authentication takes place automatically.
I have only tested it locally. If anyone is interested
in discussing this with me, or building a test site for
this, let me know, and I can make the code available and
would be willing to cooperate on getting this thing to work.
Also, I have a paper about the system describing the problem
and the details of my soluation which I'd be happy
to send upon request.
