Update the GSSAPI SASL mechanism handler to use the identity mapper API in to
resolve the Kerberos principal to the corresponding directory user, rather than
a fixed exact-search mechanism.  This is more flexible and more consistent with
the implementation of the other SASL mechanisms.