r84: Implement --required-membership-of=, an ntlm_auth option that restricts