Afs is capable of starting very early, and should be started as soon as the local file system has been mounted and the network is up. It needs good time to give authenticated access, but not to start up. For example, we keep ntpdate and xntpd in /afs, so we have to start afs first. After afs is running, the time service starts, and then authenticated operation can begin.