This commits implements "extended group lists" feature which
allows secondary group list to be longer than 16 by not trusting grplist in AUTH_SYS creds
This commit reuse deprecated EXPORT_OPTION_USE_PNFS flag
Cache group list is kept 30 seconds. When expired, getgrouplist() is called again.
This value is not tunable yet. It will be in a further commit.