If we want to be able to use GSS as a way to distinguish clients in nodemaps, we would need a new gss_identification property. So let's reserve an LCFG_NODEMAP_ for it.
We would also potentially need another one to be able to lookup a nodemap based on the sha256 of its name, as sent from client to server as part of the gss context negotiation process.