Process Authentication Group.
If you are in a PAG, you will notice strange group ID's when you type "id" at bash.
This is so you can change users and keep your AFS tokens.
See pagsh.
One page links to PAG: