Keys (encryption+MAC) can now be stored in apache configuration.
The key must be a base64 encoded blob of original length of 32 bytes
(16 bytes for encryption and 16 for the MAC key)

The format is:
key:<base64 blob>

By setting GssapiUseSessions we enable the module to store a bearer
token with the user and gss names in the client, this way we can allow
clients to perform authentication once but then remain authenticaed
for the duration of the session or until the original credentials expire.

The Secure cookie used to store the token is encrypted using a randomly
generated AES key at process startup. This means multiple apache servers
will not be able to use the same cookie, however the client will reauth
transparently if the cookie cannot be read.

Remove unnecessary cruft, that was only making things harder to read.

On my system I have high UIds, without tar-pax make dist fails.
Also add other useful parameters

This way the context is available for the duration of the connection.
It is also properly freed if the connection is interrupted before the context
is fully established.

On errors mc->ctx would be left pointing at the freed context,
make sure it is cleared if we delete the context.

The token was being trunkated as the total length should have been:
replen + 10

Just remove this line, apr_base64_encode() already properly terminate
the buffer.