HADOOP-11096. KMS: KeyAuthorizationKeyProvider should verify the keyversion belongs to the keyname on decrypt. (tucu)
HADOOP-11097. kms docs say proxyusers, not proxyuser for config params. (clamb via tucu)
HADOOP-11062. CryptoCodec testcases requiring OpenSSL should be run only if -Pnative is used. (asuresh via tucu)
HADOOP-11099. KMS return HTTP UNAUTHORIZED 401 on ACL failure. (tucu)
HADOOP-11016. KMS should support signing cookies with zookeeper secret manager. (tucu)
HADOOP-10982
Revert "HADOOP-10982"

This reverts commit d9a86031a077184d429dd5463e7da156df112011.
Revert "HADOOP-11016. KMS should support signing cookies with zookeeper secret manager. (tucu)"

This reverts commit 0a495bef5cd675dce4c928cb5331588bb198accf.
HDFS-6705. Create an XAttr that disallows the HDFS admin from accessing a file. (clamb via wang)
Merge changes from trunk