[krbdev.mit.edu #5596] patch for providing a way to set the ok-as-delegate flag

[Sam Hartman via RT]

Note that this is related to a similar issue that we've received from
Sandia.  We should look at both in conjunction and should try to deal
with both soon.