I thought that if I have a cross relation to other realms ( sharing a common key ) then they would be accepted as system:authuser in my realm. Apperently it dosn't work like that. How can I accept those tokens as system:authuser in my cell and use them in acl and groups.