Add a 'groupfinder' callback to our AuthTktAuthenticationPolicy
Make the 'secure' parameter configurable for the AuthTktAuthenticationPolicy
Use sha512 in our AuthTktAuthenticationPolicy
Give the security response team admin privs
Track the "packager" group as well