Allow local users without proxies to authenticate but prefer GSI if
they've got a proxy