Re: multimple domain authentication

> How do we do this?
> 

by having the local auth server act as a mediator between the client
and its authentication server.  i think ehg said it's possible to be
able to transport keys securely between the two and only snoop the
final result -- success of failure (again, i may be wrong with this :)

/lib/ndb/auth expands to hold information about authentication domains
we can allow in, something like:

	friendlyauth=plan9.ucalgary.ca
		uid=!bootes uid=!someoneidontlike uid=*

doable?