+ Setting up servers:
+ * KerberizedServer explains keytabs and how to get one and how that lets you SSH somewhere with Kerberos.
+ * ClientCerts should explain, if for some perverse reason you don't want to use scripts.mit.edu :-), how to set up client cert authentication on your own machine (grab the CA out of the apache-ssl locker, submit a CSR to mitcert@, set up scripts' magic Apache modules to make your life easier)
+