kerberos: connect to BOS over SSL (unblocks AIM 6.9)

foodgroup/auth.go

@@ -338,6 +338,7 @@ func (s AuthService) KerberosLogin(ctx context.Context, inBody wire.SNAC_0x050C_
 									TLVList: wire.TLVList{
 										wire.NewTLVBE(wire.KerberosTLVHostname, advertisedHost),
 										wire.NewTLVBE(wire.KerberosTLVCookie, cookie),
+										wire.NewTLVBE(wire.KerberosTLVConnSettings, wire.KerberosConnUseSSL),
 									},
 								},
 							}),

foodgroup/auth_test.go

@@ -1178,6 +1178,7 @@ func TestAuthService_KerberosLogin(t *testing.T) {
 											TLVList: wire.TLVList{
 												wire.NewTLVBE(wire.KerberosTLVHostname, "127.0.0.1:5190"),
 												wire.NewTLVBE(wire.KerberosTLVCookie, []byte("the-cookie")),
+												wire.NewTLVBE(wire.KerberosTLVConnSettings, wire.KerberosConnUseSSL),
 											},
 										},
 									}),

wire/snacs.go

@@ -2173,6 +2173,9 @@ const (
 	KerberosTLVBOSServerInfo uint16 = 0x0003
 	KerberosTLVHostname      uint16 = 0x0005
 	KerberosTLVCookie        uint16 = 0x0006
+	KerberosTLVConnSettings  uint16 = 0x008E
+
+	KerberosConnUseSSL uint16 = 0x0002
 
 	KerberosErrAuthFailure uint16 = 0x0401
 )