making zlib inclusion and pserver optional?

[Patton, Matthew E., CTR, OSD-PA&E]

Classification: UNCLASSIFIED

While lots of platforms have had zlib for quite some time I realize that not
all others (windoze in particular) don't. Shouldn't the configure script use
the system zlib instead if it exists?

With the recent spate of messages regarding pserver, shouldn't the default
be to disable this "dangerous" mode by default? So those wanting the feature
have to build it specifically for themselves?

Looks like we need an option to disable AUTH_SERVER_SUPPORT to go along with
the option to turn off pserver capability on the client, too. Purhaps call
it '--disable-password-authentication' and it would remove password
authentication from both server and client.