Cron needs to be able to see the key file system.  Generally, this is only
available on the auth server.  You could start up keyfs on another system,
though you should worry about what processes can get at the file system.