Add support for CASRootProxiedAs.

This should let us put an F5 (or something) in front of nagios for SSL and still allow sso to work.