Refactor the authorization options for the API server so
pkg/apiserver isn't directly imported by the options package.