authentication surrogate
A type of principal represented by an entry in a cell's registry that specifies the same secret key as a corresponding entry in another cell's registry. The Authentication Services of the two cells use the secret key for the purpose of exchanging data about principals without either Authentication Service having to share its private key with the other. Authentication surrogates are necessary for intercell authentication. See also peer trust.