SASL/GSSAPI (Kerberos) support

This patch should provide Kerberos connectivity. At least it works for me - this was relatively tricky to figure out, hopefully people will find it useful.