CAS-1238 Remove authentication policy check on granting PGT.

In the absence of a use case for applying policy checks to service
credentials, as happens with delegateTicketGrantingTicket, the safest
behavior is to avoid security policy enforcement altogether. If
requirements come to light, we should have some guidance on how to proceed
in this case.