iterator code does not need reference to object
more flexible allocator usage
allow custom CF allocator for context
mark cred resolved if assertion set
acquire_cred_ext for CredUI integ
allow main runloop to run, for WebKit
check for gss_aapl_initial_cred
acquire_cred_ext.c
compile fix if no HAVE_GSS_INQUIRE_ATTRS_FOR_MECH
don't crash BIDAcquireContext if no CF allocator