WL#7726: System account auth plugin

Affects: Server-5.7   —   Status: Complete

There are several use cases for privileged accounts which should prohibit all
connections using them:

* Proxy base user
* Stored programs and functions
* Events

This is best handled with the ability to explicitly restrict new connections for
a specific account, but can be done for 5.5 and 5.6 today using an
authentication plugin which always returns false (no connections allowed).  This
would be a meaningful stop-gap solution until 5.7 GA implements the preferred
solution.