OK deraadt@

Input deraadt@
OK benno@, sthen@

which was a "better than nothing" measure for 5.9.
Another user to come. Approved by deraadt@ on principle.
thanks sthen@ for checking my lines over.

ok deraadt

They should not share a uid.  Leave the proxy uid for later mop-up
(sysmerge does not handle uid renamings well enough)
ok dlg, ok aja a while back

ok sthen@

multi-user builds. Discussed with espie, ajacoutot, ok deraadt

ok matthieu@ miod@

a proper & complete bind port will show up.
discussed with many for years

reported by Scott McEachern <scott@blackstaff.ca>
ok deraadt@ and todd@

* _afs: arla/nnpfs got disabled then removed long ago
* _kdc, _kadmin: these were added 10 years ago but never used for
anything afaict
ok dcoppa@ beck@

ok sthen@ deraadt@

Pointed out by ajacoutot@

Lots of agreement.

pointed out by jsg@

ok deraadt@

run by root, it binds a shared address to the socket, cranks the
process priority and drops privileges. sio_open(3) will try to
connect to the private socket first (if any), then to the shared
socket. Only one user may have connections to aucat at a given
time.
based on discussions with henning, pyr and others
ok jacek, deraadt

pointed out by jmc@

spotted by rainer@, ok uwe@

approved by deraadt@, ok thib@

start.
ok dlg@

ok miod@, henning@

ok claudio@

ok derradt@