Add the ability for a site to inject a list of allowed DNs into a VO pilot
HEP Cloud needs to have the ability to allow or ban specific users inside a pilot regardless of which VO launched that pilot. For example, on some HPC sites there are certain requirements about who is allowed to run jobs there. CMS may send a pilot to HEP Cloud and HEP Cloud may direct that pilot to an HPC site. HEP Cloud needs the ability to inject the DN whitelist and/or blacklist into the CMS pilot so that only allowed user jobs land on that pilot.