netcmd: auth policy: add user-allowed-to-authenticate-from subcommands