logout rsync 10.6

we are planning on using rsync as a replacement for mobile acc syncing in 10,6. (the reasons are outlined in my post in the AD integration forum) The setup is the classic magic triangle, We have enabled kerberized ssh to allow rsync without password prompting Our afp server is kerberos only I have created 2 launch agents one which syncs user data from server on login and one which syncs data every n minutes back to the server. All very nice but in replicating the functionality of the mobile syncing I need to run the rsync command on logout also. This seems to be the tricky bit! we cant run a logout hook or logout script as these both run as root and wont have the users TGT. There does not seem to be a way of doing this via a daemon unless Im mistaken? I have looked at etc/rc.shutdown which is only useful for when as the name suggests shutting down the machine and it seems at somepoint (pre launchd?) there was a .logout file in the user folder which I assume is deprecated. Has anyone else here tackled this?