Add auth_gss_authorized_principal support

This can be used to specify a list of principals that are allowed to authenticate