operserv/specs: one priv per line

operserv/specs: list the actual priv name
services: accept auth from other servers

For experiments with custom SASL auth agents. INSECURE.
WIP: saslserv/gssapi