[anarazel]

Well, kerberos isn't a bad answer for that. But it's way too annoying to set up :/