JGRP-1838 & JGRP-1839 SASL fixes (3.4)

JGRP-1838 Separate CallbackHandler depending on mode of operation
JGRP-1839 Wrap calls to saslClient.evaluateChallenge in a PrivilegedAction for GSSAPI

for the 3.4 branch