STABLE14-aix-lam-aklog-update-20080103

STABLE14-aix-lam-aklog-update-20080103

LICENSE IPL10

make the aklog lam plugin work correctly in e.g. the CDE screenlocker, which is
part of the long-running and not-run-by-user dtsession; this means we do wackiness to
1) not pag ourselves in that case
2) setuid to the user to set uid tokens if we got a username and are root
3) do not use pr_mumble get the the AFS ID to put in the tokens, as multiple
   initializations of Rx in the process space of dtsession crashes it

(cherry picked from commit 3a541eb11d1bc7bd05b85635315214218d3b5d6f)