It would be great as part of this function to check before hand if the user is already logged in or not.  On the security branch we added in AutoTGT that if Hadoop is available on the class path it will automatically log you into Hadoop using the TGT.  My concern here is that code running on multi-tenant storm and single-tenant storm will need to be different from one another.