auth_tkt must be in authenticators for repoze2.0