[krbdev.mit.edu #5596] patch for providing a way to set the ok-as-delegate flag

[Sam Hartman via RT]

OUr position is that changing current behavior is inappropriate.
However we'd like to add a new behavior that says "only delegate if
the flag is set on the ticket."