Refactor the authorization options for the API server so pkg/apiserver isn't directly imported by the options package.