As an additional comment: initial information discussion raises the fact that authentication is not a necessary feature as no end-user is intended to authenticate as any of those service accounts -- they are intended only for suid/sgid and role usage, with sudo as the authorization mechanism.

Bumping importance up; this is a blocker for migration of tools to the labs and those who have already started working on it may end up having to redo part of their work (/way/ bad PR) if we change it later rather than sooner.

(Not yet familiar with the relative importance level. If 'highest' means "OMG the machine room is on fire!" as opposed to just "We really, really need this" then lower accordingly) :-)

Deployed to wikitech.