ISPN-4298 Wrap evaluateChallenge in PrivilegedAction when a client
subject has been specified (GSSAPI)