Relax binary name whitelisting:

- auth_ prefix now applies to the basename, not the entire path.
- Absolute paths are allowed too as alternatives to paths within the
  helpers path.
- Savers can now be any binary paths, as long as they do not start with
  auth_ (i.e. now auth_ is forbidden rather than only saver_ allowed).

Fixes #35.