Rework the rxgk and AFS introduction

The old text was confusing about cell-wide key versus per-server keys,
and also contained the incorrect statement that the token from the
vlserver could be used with any server in the cell.

Change-Id: Idee6f13bf6aae117a97d3d881dd60758e32c6a7f