ISPN-4298 Wrap evaluateChallenge in PrivilegedAction when a client subject has been specified (GSSAPI)

https://issues.jboss.org/browse/ISPN-4298