rpc: allow gss callbacks to client