New GSI (host-to-host) + Kerberos (client-to-host) authentication settings
get rid of old-style HOSTALLOW_* macros
new $use_pkg_condor_config option to prevent overwriting the default condor_config
Fixes the condor_config resource dependency
pool_password isn't neccessary for GSI and Kerberos auth
Fix the pool_password predicate
email_domain wired out as a parameter