[OpenAFS] AFS and two realms.

[Jan Johansson]

Hello.

Today we have all users in the LOCAL realm, soon they will move
to the CENTRAL realm.

To keep a separation so that if CENTRAL is cracked I can still
trust my AFS I want to keep the afs key in the LOCAL realm.

I know this is possible and then using cross-realm and ACL:s with
jdoe@CENTRAL.

Is it possible to somehow keep the key in LOCAL and tell my AFS
that jdoe@CENTRAL is jdoe so that I do not have to change every
ACL?

Jan J