factotum is similar to kerberos iirc. Plan9 was deisgned as distributed computing environment(separating fs, cpu and auth). Although you can and many people do run all of them on same machine.
you don't need to remove it from kernel. You can choose which service to run on a machine. A 'terminal' can be configured without running auth service. But you need an auth server when you communicate with other machines.
