Authentication is handled by GSSAPI/Basic-auth against kerebros. We only need to care about authorization, which is handled by: #68 #69 #70 Most likely we can replace all of fg_auth.py
