Add filtering flags to enforce client behavior.
This is need to prevent clients to disclose TGTs by forwarding them.
By default forwarding credentials via gssproxy is disabled.
Tested with libssh and working.
Simo.
--
Simo Sorce * Red Hat, Inc * New York