Track auto-created subsections

The subsection will exist, but the "reference = foo" CONF_PAIR
won't exist.  So key off of that to determine if we run the section.

We need this because the default config has no "reference"
for "post-auth" in queries.conf.  So setting it to NULL is a bad
idea.