add --with-gssapi for shibresolver