Allow callable conf options to be callables

The external_authn_callable and external_authz_callable configuration
options only accepted strings, in 'module.function' form. This patch
adds the ability to simply supply an actual callable as the value of
these config options.