Looking at xauth in GDM it writes into /var/run/gdm/auth-for-USER-HASH/, so another option is to put the auth files in a writable directory.
Looking at xauth in GDM it writes into /var/run/ gdm/auth- for-USER- HASH/, so another option is to put the auth files in a writable directory.