services: accept auth from other servers

For experiments with custom SASL auth agents. INSECURE.
WIP: saslserv/gssapi