cron does exactly the same thing.  it no longer has to run on the auth
server.  it just has to run on a cpu server whose host owner can
speak for anyone.  That's the relation that's in /lib/ndb/auth
on the auth server.